forked from PeoplePerHour/clam
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Dockerfile
55 lines (41 loc) · 1.97 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
FROM debian:jessie
ENV CONFIG_DIR /opt/config
ENV SUPERVISOR_CONF ${CONFIG_DIR}/supervisord.conf
ENV FRESHCLAM_UPDATE 2
ADD ./config /etc/supervisor/
ADD ./start_clamav.sh /opt/
RUN apt-get update && \
apt-get install -y \
clamav clamav-daemon python gcc musl-dev python-pip wget && \
# Install Supervisor.
easy_install supervisor && \
# Create folders and set proper permissions
mkdir /var/run/clamav && \
chown clamav:clamav /var/run/clamav && \
chmod 750 /var/run/clamav && \
mkdir -p /var/lib/clamav/ && \
chown -R clamav:clamav /var/lib/clamav/ && \
rm -rf /var/lib/apt/lists/* && \
# Create logs directory
mkdir -p /var/log/supervisor && \
chmod -R 0777 /var/log/supervisor && \
# Make the start-script executable.
chmod +x /opt/start_clamav.sh && \
# Make clam and fresh to be run on forground so that supervisor take care of the rest
sed -i 's/^Foreground false/Foreground true/g' /etc/clamav/clamd.conf && \
sed -i 's/^Foreground false/Foreground true/g' /etc/clamav/freshclam.conf && \
# Make clam configuration changes that help with TCP sending packets
sed -i 's/^MaxThreads 12/MaxThreads 15/g' /etc/clamav/clamd.conf && \
sed -i 's/^MaxEmbeddedPE 10M/MaxEmbeddedPE 20M/g' /etc/clamav/clamd.conf && \
sed -i 's/^IdleTimeout 30/IdleTimeout 120/g' /etc/clamav/clamd.conf && \
sed -i 's/^CommandReadTimeout 5/CommandReadTimeout 30/g' /etc/clamav/clamd.conf && \
sed -i 's/^SendBufTimeout 200/SendBufTimeout 300/g' /etc/clamav/clamd.conf && \
# Make clam listen to remote socker and not unix socket
sed -i 's/^LocalSocket \/var\/run\/clamav\/clamd.ctl//g' /etc/clamav/clamd.conf && \
echo "TCPSocket 3310 " >> /etc/clamav/clamd.conf && \
# Fetch db when building the container in order to save time on starting the service
freshclam --stdout
EXPOSE 3310
VOLUME [ "/opt/files", "/opt/config", "/var/log/supervisor" ]
WORKDIR /opt
CMD [ "supervisord", "-c", "/etc/supervisor/supervisord.conf", "-n"]